Binary Analysis Cookbook

How it works...

We start this recipe using the file command against our binary, which displays a good amount of information. We can see this is a 64-bit ELF formatted executable binary that contains its symbol table (because we see not stripped in our output). The file command is a great way to start because it gives us quick yet detailed information about the format of the binary and other pertinent information, such as the architecture, whether we're dealing with an executable or a relocatable object file, the binary hash, and whether or not the binary has been stripped of its symbol table or not. The output of the file command is largely dependent upon the options used when the binary was compiled. If this were a CTF binary analysis challenge, ...